Vulnerabilities CVE-2026-42127

CVE-2026-42127

High

Open

TLP:CLEAR

Pre-authentication denial of service in the public dashboard query endpoint

NVD CVE.org

Critical Infrastructure DDoS

AI Analysis

No AI analysis yet.

Description

The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid dashboard access token or authentication is required to exploit this vulnerability.

Details

CVSS Score: 7.5
EPSS Score ⓘ: 0.43%

35.6th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Confidence: 90%
Published: Jun 22, 2026
Last Modified: Aug 11, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.